PT-2018-14695

Name of the Vulnerable Software and Affected Versions LiquidVPN client versions through 1.37 for macOS Description The issue allows an attacker to communicate with an unprotected XPC service, enabling the execution of arbitrary OS commands as root or the loading of a potentially malicious kernel...

PT-2018-14694

Name of the Vulnerable Software and Affected Versions LiquidVPN client versions through 1.37 for macOS Description The issue allows an attacker to communicate with an unprotected XPC service, enabling the execution of arbitrary OS commands as root or the loading of a potentially malicious kernel...

CVE-2018-0694

FileZen V3.0.0 to V4.2.1 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0694

The CVE-2018-0694 issue affects FileZen (V3.0.0 to V4.2.1) and allows a remote attacker to execute arbitrary OS commands via unspecified vectors. The connected documents corroborate that this is a remote command-injection vulnerability in FileZen, with the impact described as arbitrary command ex...

PT-2018-9020

Name of the Vulnerable Software and Affected Versions FileZen versions 3.0.0 through 4.2.1 Description The issue allows remote attackers to execute arbitrary OS commands. Recommendations For versions 3.0.0 through 4.2.1, update to a version that contains a fix for this issue...

CVE-2018-19081

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to execute arbitrary OS commands via the IPv4Address field...

CVE-2018-19070

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow remote attackers to execute arbitrary OS commands via shell metacharacters in the...

Design/Logic Flaw

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow attackers to execute arbitrary OS commands via shell metacharacters in the modelName,...

CVE-2018-19081

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to execute arbitrary OS commands via the IPv4Address field...

CVE-2018-19073

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow attackers to execute arbitrary OS commands via shell metacharacters in the modelName,...

PT-2018-14794

Name of the Vulnerable Software and Affected Versions Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128 Description An issue was discovered that allows remote attackers to execute arbitrary OS commands. This is achieved through the ONVIF devicemgmt SetDNS...

PT-2018-14786

Name of the Vulnerable Software and Affected Versions Foscam C2 versions 1.11.1.8 Opticam i5 versions 1.5.2.11 Description An issue allows attackers to execute arbitrary OS commands via shell metacharacters in the modelName, by leveraging write access to the /mnt/mtd/app/config/ProductConfig.xml...

CVE-2018-14558

An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44CNAC7, AC9 devices with firmware through V15.03.05.196318CNAC9, and AC10 devices with firmware through V15.03.06.23CNAC10. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a craft...

CVE-2018-13802

A vulnerability has been identified in ROX II All versions V2.12.1. An authenticated attacker with a high-privileged user account access via SSH could circumvent restrictions in place and execute arbitrary operating system commands. Successful exploitation requires that the attacker has network...

Command injection

A command injection vulnerability in the web server functionality of Moxa EDR-810 V4.2 build 18041013 allows remote attackers to execute arbitrary OS commands with root privilege via the caname parameter to the /xml/netWebCADELETEGetValue URI...

Input validation

Ubuntu14.04 ORCA Online Receipt Computer Advantage 4.8.0 panda-server 1:1.4.9+p41-u4jma1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

PT-2018-8982

Name of the Vulnerable Software and Affected Versions ORCA versions 4.8.0 and earlier panda-server version 1:1.4.9+p41-u4jma1 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands. The exact vectors used for this are not specified...

PT-2018-9001

Name of the Vulnerable Software and Affected Versions I-O DATA network camera products TS-WRLP versions 1.09.04 and earlier I-O DATA network camera products TS-WRLA versions 1.09.04 and earlier I-O DATA network camera products TS-WRLP/E versions 1.09.04 and earlier Description The issue concerns...

CVE-2018-0643: Improper Neutralization of Special Elements used in an OS Command

Ubuntu14.04 ORCA Online Receipt Computer Advantage 4.8.0 panda-server 1:1.4.9+p41-u4jma1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

CVE-2018-15887

MainAnalysisContent.asp in ASUS DSL-N12EC1 1.1.2.3345 is prone to Authenticated Remote Command Execution, which allows a remote attacker to execute arbitrary OS commands via service parameters, such as shell metacharacters in the destIP parameter of a cmdMethod=ping request...